fixes #3005 - restrict gettext to Ruby 1.8 compatible version

(cherry picked from commit bdaf88803294f4442b44e7184e65ac42c1ea6bd7)
fixes #3010 - use the correct helper function name

(cherry picked from commit 3d321a7f91d096b649cc88ec8cdaba35fe1a70be)
fixes #2860 - don't convert arbitrary input into symbols (CVE-2013-4180)
fixes #2863 - restrict APIs to resources that a user is permitted to manage (CVE-2013-4182)
Release 1.2.2